From a7f8c197adbc684dd9de6356ea1a5a9b59a5c322 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 15 Apr 2010 19:01:17 +0200
Subject: s4:rootdse: only return "tokenGroups", when the client asked for them

metze
---
 source4/dsdb/samdb/ldb_modules/rootdse.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source4/dsdb/samdb/ldb_modules/rootdse.c b/source4/dsdb/samdb/ldb_modules/rootdse.c
index d18e41c294..f10a125eb6 100644
--- a/source4/dsdb/samdb/ldb_modules/rootdse.c
+++ b/source4/dsdb/samdb/ldb_modules/rootdse.c
@@ -382,7 +382,7 @@ static int rootdse_add_dynamic(struct ldb_module *module, struct ldb_message *ms
 		}
 	}
 
-	if (do_attribute(attrs, "tokenGroups")) {
+	if (do_attribute_explicit(attrs, "tokenGroups")) {
 		unsigned int i;
 		/* Obtain the user's session_info */
 		struct auth_session_info *session_info
-- 
cgit